Horizon Clone Setup

Setup Gold Image

Create the Virtual Machine

Select 8 CPUs
1. Expand the CPU drop down and change the cores per socket to 8
Select memory for the machine to be 10 GB
1. Expand the tab and click “Reserve all guest memory”
Choose 80 Gb disk size and make sure to select thin provisioning.
Select VM Network for network adapter. Expand the network adapter and select the adapter type to be VMXNET 3.
Select Datastore ISO File for CDRom and browse for the windows ISO file.
Delete the New USB Controller (don’t do this if you want to let the user connect USB drives)
Expand the Video card section and change the Number of Displays to 2 and set the Total video memory to 256 MB (Do not select the 3d acceleration if you don’t have the grid card)
Enable video card PCI device - NVIDIA GRID
1. Meaning of extensions
  Q = RTX Virtual Workstation license. ISV certified driver for best performance & CUDA capabilities

B = Virtual PC. Used for basic office applications, video conferencing and knowledge/task workers.

A = Virtual Apps. Used for XenApp/RDSH

C= Virtual Computer Server. Used for computer only AI workloads

Select grid_t4-2q for the VMs

Swap over to the VM Option at the top.
Expand Advanced, and uncheck Enable logging
Under Advanced still, Click on Edit Configuration next to Configuration Parameters.
1. Click on Add Configuration Params 3 times
2. Enter the 3 parameters:
  1. For Name, type devices.hotplug, and for Value, type false.
  2. For Name, type usb.generic.allowHID, and for Value, type TRUE.
  3. For Name, type usb.generic.allowLastHID, and for Value, type TRUE.
Click Ok and finish setup of Virtual Machine.

Install Windows

Select Windows 10 Education
Install as you would normally
After windows is installed, enter Audit Mode to continue with setup
1. This is done by pressing CTRL+SHIFT+F3 after the install reboot

Install VMware Tools

Use vSphere Web Client to Mount the VMware Tools Virtual DVD Drive
Open a Command Prompt and Install VMware Tools (in the VM itself)
1. Don’t use the exe, use the following Command:
  d:\setup64.exe /s /v" /qb REBOOT=R ADDLOCAL=ALL REMOVE=Hgfs,VSS,AppDefense,NetworkIntrospection"
  
  This command users the remove option to remove the following modules:
  
  -- Hgfs is the module for VMware shared folder drivers, which is not used with Horizon.
  -- (Conditional) SVGA is the VMware SVGA driver, but a newer version will be installed by the Horizon Agent.
  Important: If this VM is to be used without installing the Horizon Agent, do not remove the SVGA module.
  --VSS is a driver used for Virtual Shadow Copies, which is not used with Horizon.
  --AppDefense is a driver/service used for AppDefense integrity monitoring, which is not used with Horizon.
  --(Conditional) NetworkIntrospection is a driver that sends network events to VMware NSX.
  Important: If you use NSX, do not remove the NetworkIntrospection module.
Reboot the VM once completed

Delete recovery partition

Open Command Prompt (as administrator)
Type diskpart
Type list disk to show the partitions
Type select disk 0 (this should most likely be the correct disk but list disk will let you know
Type list partition to view the partitions
Type select partition 4 (or whichever partition is the recovery partition)
Type delete partition override to delete the recovery partition
Go into Disk Management and extent the C drive partition

Install extra features and update

Install .Net Framework 3.5
1. Go to add remove programs
2. Click on Turn Windows features on or off on the left side menu
3. Select .NET Framework 3.5 from the menu and click ok
4. Allow the packages to download from Microsoft
Install VC_redist.x64 located at:
\\fileshares\IT Resources\SBSD DNS\VMware\horizon\AppsToInstall\iLab
Run all windows updates (will probably take multiple tries and reboots to finish them all)

Optimize the VM Hardware

Shutdown the VM
Open the Edit Settings Dialog Box
Remove Devices that will not be used starting with the CDROM. To remove the virtual CD/DVD drive from the VM, click the X that appears when you hover your pointer over CD/DVD drive 1 row. Then, click OK and edit the VM again.
Next Remove the SATA Controller. To remove the virtual SATA controller from the VM, click the X that appears when you hover your pointer over the SATA Controller 0 row. Then, click OK and edit the VM again.
Allow the VM to boot back into audit mode

Apply Registry changes and sysprep image

Navigate to \\adult\ITResources\SBSD DNS\VMware\horizon
Copy folder: OptimizationTools to the c:\Program Files\VMware directory (this is very important because several processes trigger off of that location)
Navigate to that directory and launch the “VMwareOSOptimizationTool.exe”
Click Analyze in the lower right corner
After it finishes the analyzation, click Common Options
Under Visual Effects, uncheck “Disable hardware acceleration for IE, Office and Adobe Reader”
Under Update, uncheck Disable Windows Update
Under Search, Select “Keep Cortana Search” and “Show Search Box as an icon on the taskbar”
Under Store Apps, Select Calculator, Paint3D and Photos
Under Background, select the dark grey
Under Security, Select “Disable Firewall” “Disable Antivirus” and “Disable Security Center”
Click Ok to close the Common Options box, then click Optimize in the lower right hand corner
Navigate to: C:\Program Files\Vmware\OptimizationTools
1. Rename adobe.reg.txt and RegistryChanges.bat.txt to remove the .txt extensions
2. Run RegistryChanges.bat
Switch back to the Optimization Tool, Click Generalize at the top, change the timezone to eastern, then click Generalize
When this finishes, it will prompt you to reboot the system. Click OK to reboot and finish the sysprep

Install Horizon Agent

Launch the installer, and click next, and accept the terms of the license agreement
Select IPv4 and click next
On the Features page:
1. Enable USB redirection
2. Enable Horizon Performance Tracker
3. Click Next when done
Reboot the VM

Install the Dynamic Environment Manager Agent

The Installer is located at \\adult\ITResources\SBSD DNS\VMware\horizon\CurrentVersion\VMware-DEM-Enterprise-2106-10.3-GA
Install the x64 bit exe with the default options (no license should be necessary on horizon -- it gets its settings registry keys so that should be all you need

Attach VM to the domain

Give the VM a name and attach it to the domain.
Move the computer into the Horizon Instant Clones OU (not the updates disabled OU)
Reboot
Login with SBSDHelpdesk for further tasks - don’t log in with your local credentials because this will be the master image and you don’t want those credentials cached on the machine

Install Applications in for the Base Image

Install VLC
Install Notepad++
1. Navigate to the Notepad++ directory and rename the updater folder to something like “updater-disabled” (This will actually disable the NP++ updater)
Install 7Zip
Install Chrome
Install Firefox ESR
Install Google Drive FS
1. Copy Shortcut to desktop and all users startup
Copy TeamViewerPortable folder to C:\program files directory
Setup DesktopInfo
1. Copy contents of folder to program files directory
2. Copy shortcut to all users startup (shell:common startup)
3. Make sure to make sure the programs are “unblocked”
Install Adobe products
1. Open the programs to the pop up login prompt (don’t log in), then copy the C:\Users\sbsdhelpdesk\AppData\Roaming\Adobe folder the the corresponding folder in the Default user profile
2. Go to Service and Disable the AdobeUpdateService
Install MediBang Paint Pro
Install MS Office
Install Carbon Black
1. Move the CarbonBlack Folder to the C:\windows\System folder
2. Run the Install Clone installCB.vbs file
Install WacolTablet Driver (bofh of them)
1. Change Service “Wacom Professional Service” to Manual
2. Copy “Start Wacom Tablet Software.bat” to all users desktop
Install Scanner drivers: HP and Cannon
Install Audacity
1. Turn off checking for updates and move the roaming profile for audacity to the default users profile such as was done with adobe
Go to C:\Users\Public\Public Desktop and delete any unwanted shortcuts for all users
Install Nvidia drivers: BIG NOTE you won’t be able to use vmware remote console to log into vm after you do this. Make sure you can RDP into the vm first.

Cleanup and finish the creation of the image

Note: These steps should be done every time the image is opened back up to update it

Run Windows updates
Open Chrome and get updates
Open MS Edge and get updates
Open Firefox and get updates
Install any updates for any other base image products
Update google file stream and make sure the file stream link is still accurate in the DEM
Run the VMware OS Optimization Tool
1. Lunch the VMware OS Optimization Tool:
  C:\Program Files\VMware\OptimizationTools\VMwareOSOptimizationTool.exe
2. Click on the Finalize tab on the top.
3. Uncheck the “Zero empty disk space” box and “Release IP address” box
4. Click the Execute button at the bottom of the page
Run Sdelete manually: C:\Windows\System32\sdelete64.exe -z C:
Shutdown the VM by running command: shutdown /s /t 0 /c “Image Ready”

Clone VM to shrink size and take master snapshot

Using vSphere Web Client, right-click the VM in the inventory list, and select Clone.
Select Clone to Virtual Machine.
Step through the clone wizard. In step 4, select Customize this virtual machine’s hardware
In the Customize hardware field, adjust any hardware that you might want to from the first image. Specifically check the hard drive and make sure it is still thin provisioned. After you’re satisfied, complete the wizard.
Next Take a snapshot of the VM. Label it “Clean Master” or some such thing.

AppStacks

Adobe

Create a new AppStack for Adobe
Open up your newly created AppStack under Packages, and click on “Package”.
Next select your provisioning VM
On the provisioning VM install adobe, but do not install from the normal package install. Open the package to navigate to the following directory: Adobe\[package_name]\Build\Setup\APRO20.0\Adobe Acrobat
Run CMD: “Setup.exe /sALL /msi ROAMIDENTITY=1 ROAMLICENSING=1”
Let the install finish, click on the OK and reboot the VM
Now that the provisioning is finished, to back into app volumes and give entitlements to the VM

ADS Profund

Create a new AppStack for ADS (or include it along with another AppStack)
Open up your newly created AppStack under Packages, and click on “Package”.
Next select your provisioning VM
On the provisioning VM install the profund.runtime.msi located at:
\\profund\ADS Shared\ClientDeployment\ProFund Runtime
Next copy the Profund Application folder located at:
\\profund\ADS Shared\ClientDeployment\Application Files
to C:\Program Files (x86)
Find the ProFund.Shell.exe and create a shortcut to it on the all users Desktop which is located at:
C:\Users\Public\Desktop
Click on the OK and reboot the VM
Now that the provisioning is finished, to back into app volumes and give entitlements to the VM

Windows Apps

Windows Apps can’t be deployed via App Stacks currently, so they have to be deployed on the base image
1. Install on the base image prior to doing the registry changes via the vmware optimization tool
2. Update the VMware Optimization tool in the Remove Apps tool section to exclude removing the new windows store app
3. Create a shortcut from the shell:appsfolder. Use the DEM to deploy that shortcut if needed because preexisting machines will not get the new shortcuts in their start menu.
(Just for Reference) More information: How to create a custom shortcut per this article:
https://answers.microsoft.com/en-us/windows/forum/windows_10-windows_store/starting-windows-10-store-app-from-the-command/836354c5-b5af-4d6c-b414-80e40ed14675
Such as this link:
C:\Windows\explorer.exe shell:appsfolder\Microsoft.Office.OneNote_8wekyb3d8bbwe!microsoft.onenoteim